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PLEASE AMEND THE CLAIMS AS FOLLOW: 

1. (Currently Amended) A computing system comprising: 

a network coupling a first computing subsystem and a second computing 
subsystem; 

wherein the second computing subsystem provides sending of streaming data 
packets containing di gital media to the first computing subsystem; 

wherein the first computing subsystem oomprioing a first processing subsyst e m 
providing provides means fonl egte 



(a) -for proc e ssing of streaming data pac k ets, uooording to defined rules for 
proc e ssing streaming data packets , a n d 

(b) for generation and selectively s e n di n g of security tag v e ctors: and 
a-s eeond s ubsystem oomprifling a s e oond proc e s s ing subsystem 



media from t e-tbe fosfr -second computing subsystem, 

(b) processing of the streaming data packets containing digital media to 
provide at least one of audio play ing on a sound device and a video playing on a 
display device for receiving the security tag veetors , and 

(c) for provid i ng logic for validating the rooeiv e d generating of security 
tags v e ctor s r esponsive to a defined validation logic. said processing of streaming 
data packets and sending the security tags to the second subsystem: and 
wherein the second computing subsystem provides means for: 

(a*) receiving the security tags from the first computing subsystem, and 
(b) providing processing logic for validating the received security tags 
from the first computing subsystem. 

wherein a successful validation determines that the respective 
security tags were properly generated responsive to said processing of 
streaming data packets, and 



(a) receiving of 



-the streaming data packets containing digital 
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wherein a failed validation determines that the respecti ve security 
taus were improperly generated responsive to said processing of streaming 
data packets , 

2. (Currently Amended) The system as in Claim 1 , wherein the second computing 
subsystem further comprises a transmission and forwarding controller responsive to the 
pr ocessing logic for validating, for performing at least one of the following: 

&>*-('a) stopping the sending of the streaming data packets containing digital media 
to the first computing subsystem r esponsive to determination of the respective failed 
validation: and 

flri stopping the fonvardipg of further streaming data packets containing digital 
media to the first computing subsystem responsive to determination of the defined 
respective failed v alidation logic of the selectively transmitt e d security tag vectors . 

3 . (Currently Amended) The system as in Claim 1 , wherein the rules of processing are 
defined by at least one of; a content management subsystem, a digital right management 
subsystem, and predefined policy rules associated with the content flocond pubovotom i s Author 
c ompri s ed of a forwarding control lor for stopping the forwarding of the streaming data packets 
responsiv e to the def i ned validation logio of the selectively transmitt e d security tag vectors . 

4. (Currently Amended) The system as in Claim I , further comprising!, a defined sequence | 
of decryption keys; and 

. wherein portions of t he defined sequence of decryption keys are sent , one portion 
at a time, from the second computing s ubsystem to first computing subsystem, responsive 
to the d e fin e d successful v alidation of the processing logic of th e s e l e ctiv e ly transmitt e d 
s e curity Lag v e crtojna for validating the received security tags from the first computing 
subsystem . 
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5. (Currently Amended) The system as in Claim 1, wherein the processing of streaming 
data packets on the first computing subsystem is further responsive to a oomprisod of processing 
4 eg i o; and wh e r e in the processing logic is furth e r comprised of at least one of: _a privileges table, 
a privileges decision-tree, pseudo random rendering logic, a streaming data packet header 
processing privileges decision-tree, a security tag processing logic, a streaming data packet 
identification processing logic, a secure time-stamp processing logic, a processing of streaming 
data packets with secure time-stamps, watermarking information processing, fingerprinting 
information processing, stenographic information processing, data embedding information 
processing, digital signature information processing, and a processing of streaming data packets 
with secure time-stamps that is responsive to UTC (coordinated universal time). 

6. (Currently Amended) The system as in Claim 1, wherein the processing of streaming 
data packe ts on the first computing subsystem io oonatruoted with utilizes codes and parameters 
in auoor - danoe with defining and expressing at least one of: privileges, authorizations, access 
rights, and entitlements as expressed in X rML (Extensible Rights Markup Language). 

7. (Currently Amended) The system as in Claim 1, wherein at least one of: the l o gio o f t he 
fost-processing of stream ing data packets aub s vs t e m , the defin e d rules for- proces si ng . and the 
generating of security tags vector generation are further characterized oo r esponsive to a-at least 
one of: 

a predefined schedule, a secure time-stamp, renewable codes and parameters, 
updated codes and parameters, a predefined schedule received from the second 
computing subsystem, a secure time-stamp received from the second computing 
subsystem, renewable codes and parameters received from the second computing 
subsystem, updated codes and parameters received from the second computing 
subsystem, replacement codes and parameters received from the second computing 
subsystem, a predefined schedule received from a third computing subsystem, a secure 
time-stamp received from a third computing s ubsystem, renewable codes and parameters 

-5- 
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received from a third computing subsystem, and updated codes and parameters received 
from a third computing subsystem. 

8. (Currently Amended) The system as in Claim 7, wherein at least one of: selected parts 
of the logio of tho first p rocessing subsyst e m of the streaming da(a packets, selected parts of the 
defi n e d rules for proec s ning. selected porta of tho generating of security tags v e ctor generation 
selected parts of the renewable codes and parameters, and selected parts of the updated codes and 
parameters, are provided from an external storage medium. | 

9. (Currently Amended) The system as in Claim 8, wherein the external storage medium is 
at least one of: a smart card, a tamper-pyee £rcsistant device, anobfiiscated storage, ahidden 
storage, an encrypted data storage, aremovable storag e device , a token card, a network 
interface, a wireless access point, a wireles s base station, and a metro card. 

10. (Currently Amended) The system as in Claim 1. wherein at l eant one of: selected parts 
of the fif gt logic, selected - parts of the defined rules for p rocessin g of streaming data packets, and 
selected parts of the generating of s ecurity tags vector generation a re defined as a plurality of 
logic modules that are interlocked for atreoming data pa ck e t p ro ce s sing togeth e r with the security 
tag v e ctor pe nerot i oH to provide concurrent execution . 

1 1 . (Currently Amended) The system as in Claim wherein the display device is at least 
one of :-m ter looked io further charact e rized in that each respectiv e one of the plurality of logio 
modules is as s ociated with a r e spective o n e o f a plurality of d e fined oubtnoko; 

wherein the combined plurality of defined subtaaks defines th e said selected partn of th e logic of 
th e first proc es sing s ub s ystem^ said s ele cted parts of ihe - d e- fined rul es and said s e lected parti) of 
th e security tag vec to r g e n e rut i on. and 

wh e rein all of the logic modul es are r e quir e d to prop e rly p e rform th e resp e ctive j 
d e fin e d aubtaak to provide the said selected parts of tho logio of tho first proceeding 

-6- 
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s ub s ystem s-s aid se l e cted parts of tho defin e d rules and said s e l e cted part s of the security 
tag v s olor -geH erotion 

an analog display, a digital display, a television, a flat panel display, a screen, a 
movie screen, a liquid crystal display, a solid state display, a home video system, a 
computer display, a CRT display, a mobile phone display, a PDA display, a three- 
dimensional display, a holographic display, a computet monitor, a handheld display, a 
digital output svstem, an electronic book display, and an analog output system . 

12. (Currently Amended) The system as in Claim 1 ? further eompris e o comprising: an I 
update controller separa t e from the first computing subsystem, and p roviding at least one of: 
updated codes, updated parameters, update decryption codes, update decryption keys, update 
rendering codes, update playing codes, and updated secure time stamp to the first subsystem. 

13. (Currently Amended) The system as in Claim 12, further comp ri s e s comprising: a j 
security management server (SMS) for providing update information to the update controller. 

14. (Currently Amended) The system as in Claim 1, further comprises a r e newab l o controller 
p r o viding a t J eas t one of: upda t ed codes, updated parameters, update decryption oodea, update 
dooiyption keys, update r end ering cod e s, update pl a yi - ng - eod e s, and updated secure timo stamp to 
the fir s t s ubsv s tem wherein the sound device is at least one of: a speaker, a plurality of speakers, 
a surrounding sound system, ear phones, loudspeakers, a high fidelity sound system, a stereo . 
a udio system, a digital output system, and an analog- output system . 

15. (Canceled) 

1 6. (Currently Amended) The system as in Claim 1 , wherein the first computing subsystem j 
is further comprised of cryptographic modules; and 

wherein the cryptographic modules provide for at least one of: 

-7- 
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program authentication, user authentication, cryptographic authentication, 
application authentication, encryption, a secure time-stamp, a digital signature, 
watermarking information, IPSec (IP Security) functionality, TLS (Transport Layer 
Security) functionality, and SSL (Secure Sockets Layer) functionality. 

17. (Currently Amended) The system as in Claim 1, wherein the second computing 
subsystem is further comprised of validation modules; and 

wherein the validation modules further provide fet-at least one of: 
program authenticatio n ch e eking , user authentication checking , cryptographic 
authenticatio n checking , application authentication ohookiog , d e cry ptiou encryption, a 
secure time-stamp, a digital signature vol idotion , validation of w atermarking information, 
IPSec (IP Security) functionality, TLS (Transport Layer Security) functionality, and SSL 
(Secure Sockets Layer) functionality. 

18. (Canceled) 

19. (Canceled) 

20. (Canceled) 

2 1 . (Currently Amended) The system as in Claim 4-&1, wherein the processing of the 
streaming data packets provides at least one of: the audio playing and the video plaving, an d 
further provides wherein the .m e dia plave * -performs at least one of: 

deleting streaming data packets after processing, deleting streaming data packets 
within a predefined time interval after processing, deleting streaming data packets after a 
defined number of times of processing, preventing copying of the streaming data packets, 
preventing printing of the streaming data packets, preventing sending of the streaming 
data packets, encrypting video rendering of content received in the streaming data 
packets, pseudo random video rendering of content received in the streaming data 
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packets, 



rag -and encrypted v ideo rendering of content stor e d m the first 
pseudo -ea fl d om video renderin g of content store d received in the first 




subsYSiemst Tcaming data packets . 
22. (Currently Amended) The system as in Claim 4-&L wherein the media play e r operates in 



with logic based upon at least one of: 

XrML (Extensible Rights Markup Language) specifications, trusted computing 
specifications, trusted computing based principles, validation of watermarking 
information, IPSec (IP Security) functionality, TLS (Transport Layer Security) 
functionality , and SSL (Secure Sockets Layer) functionality. 

23. (Currently Amended) The system as in Claim 1, wherein the second computing 
subsystem further includes a media server. 

24. (Currently Amended) The system as in Claim 23, wherein there is a plurality of the first 
computing subsystems* each coupled to the network and receiving streaming data packets from 
th e second computing subsystem, and wherein, t he media server operation i s responsive to the 



25. (Currently Amended) The system as in Claim 1 , wherein there is a plurality of the first 
computing subsystems* each coupled to the network and receiving streaming data packets from 
the second computing subsystem. 

26. (Currently Amended) The system as in Claim 25, wherein the second computing 
subsystem encodes the respective streaming data packets responsive to validating the respective 
received successful validation of the respective received security tags v e ctoro fr om the respective 
one of the plurality of the first computing subsystems. 




t least one of: the audio play in jg and the video playing operate in accordance 




-O.- 
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27. (Currently Amended) The system as in Claim 26, wherein the streaming data packets are 
encoded such that any of the plurality of the first com putin g, subsystems in which the validating 
of their security tags vectors fails-_will not thereafter be able to further decode the streaming data 
packets. 

28. (Currently Amended) The system as in Claim 3625, wherein the streaming data packets 
are encrypted by the second computing subsystem by using a group encryption scheme such that 
any of the first computing s ubsystems in which the validating of their security tags, vectors - fails 
will not be able to further decode the streaming data packets. 

29. (Currently Amended) The system as in Claim 26, wherein the streaming data packets are 
sent using at least one of: 

Multioaq tm ulticasU IP (Internet Protocol) Multioaot m ulticasfc Secure IP 
M utt ica stmulticast Greupjiroup Key -key Management management 
ArchitQQturi5» architeclurc . M^mi^-Party^ Repudiation repudiation 

Pr o tocol protocol, ^mp-group CommumoationQ Communicalions. and Secur e secure 
Ornup group Communioation s communtcations . 

30. (Currently Amended) The system as in Claim 1 , wherein there is a plurality of second 
com puti op subsystems coupled to the network, each sending a respective plurality of streaming 
data packets to the first computing subsystem. 

31. (Currently Amended) The system as in Claim 30, wherein the first computing subsystem 
sends security tags v e ctors t o the plurality of second computing subsystems for validation. 

32. (Currently Amended) The method- system as in Claim 1, wherein the first computing 
subsystem is at least one of: 

- 10- 
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a computer, a wireless device, a handheld device, a Wi-Fi device, a device j 
operating in accordance with IEEE 802. 1 1 family of standards, a device operating in 
accordance with IEEE 802. 1 5, a device operating in accordance with IEEE 802 J 6. a J 
2.5G cellular telephone, a 3G cellular telephone, a 4G cellular telephone, a 5G cellular 
telephone, a personal computer, a set-top box, a device operating in accordance with 
UMTS ( UniveraoJ kuiiversal M obil e m obile TeJopho.no t elephone System systcruV and a 
device operating in accordance to the IEEE 802t^ family of standards. 

33. (Currently Amended) The system as in Claim 1, wherein the second computing | 
subsystem further comprises encryption logic for encrypting streaming data packets prior to 
sending teem the respective streaming data packets : and 

wherein the first computing subsystem logic for p rocessing of streaming data 
packets further comprises logic for decrypting the streaming data packets. 

The system as in Claim 33, wherein the second computing 
tien a decryption key to the firs t computing subsystem processing 

35. (Currently Amended) The system as Claim 34, wherein the encryption key is provided 
for at least one of: periodically, at random times, at predefined time intervals, responsive to 
validating the r e c eive d security tag s v e ctors , and at predefined times derived from coordinated 
universal time (UTC). 

36. (Currently Amended) The system as in Claim 33, wherein the first computing subsystem 
farther comprises logic for generating and sending encryption keys to the second computing 
subsystem from at least one of the following: a smart card external device and a trusted platform 
module (T PM); and 

wherein the second computing subsystem uses the encryption keys for encrypting 
the streaming data packets prior to sending them. 

-11- 
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37. (Currently Amended) A method for atifeenticai ed - authenticatinp operation between en 
d*tta41o w9 - b e tw e en at least a first computing element and a second computing element, the 
method comprising: 

sending of data to the first computing element from the second computing 
element: 

receiving the data frfrm-in the first computing element; 

processing the data on the first computing element responsive to an operational 
logic module, a nd generating security tags v e ctors in th e lirsr computing e l e ment 
responsive to an associated tag generation module : 

wherein the associated tap generation module is only executable concurrently 
with the respective operational logic module in the first computing element: 

wherein, the processing provides p laying that provides at leas one of: ap input, to 
a n audio device and an input to a video display: 

sending the security tags vectors t o the second computing elemen t from the firs t 
computing element :-an€t 



failed validation responsive to validating that the processing of the data in 
the first computing element was not processed by the operational logic module 
operating concurrently with the generating the security tags by the associated tag 
generation: and 

stop ping s ending farther data to the first computing clement responsive to the 




-processing t he security tags vector s- in the second computing element to 



determine one of: 



successful validation responsive to validating that the processing 
compl i ant communication of the data in the first computing element was 
processed bv the operational logic module operating concurrently with the 
generating the security lags by the associated tag generation, and 



failed validation . 
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38. (Currently Amended) The method as in Claim 37, further comprising: 

providing a plurality of software logic modules and parameters operable stand- 
alone to provide a respective plurality of subtask functions as part of the first computing 
element; 

providing secure integration of the plurality of software logic modules and 
parameters to provide a combined functionality as part of th e fir s t computing elem e nt ; 

interlocking the plurality of software logic modules and parameters into a single 
logic program a s part o t - th^first computing elemen t that is only operable to concurrently 
execute the plurality of software logic modules : and 

providing the combined functionality only wheii restponsive to the plurality of 
subtask functions ar e ex e outed concurrently executing responsive to the single logic 
program a s pairt - ofa t the first computing element 

39. (Currently Amended) The method as in Claim £&37, furth e r compri s ing: 
producing wherein the generating security tags forms a pseudo-random sequence of security tags 
v e ctors by th e first computing e l e ment . 

40. (Currently Amended) The method as in Claim 39, further comprising: 

producing the pseudo-random sequence of security tags vectors utilizing 
computation by- according to at least one of: 

applying a pseudo-random generator, applying a pseudo-random function, 
applying a cryptographic function, applying an encryption function, applying a 
scrambling subroutine, applying an authentication function, applying a digital 
signing function, applying a cryptographic hash function, applying a subroutine, 
applying a computational logic module, applying a symmetric cryptography 
function, applying an asymmetric cryptography function, employing a 
cryptographic key, employing a cryptographic seed, employing an encrypted 
software, employing an obfuscated software, employing a hidden program, 
employing watermarking information, employing fingerprinting information, 

-13- 
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employing digital signature information, employing logic with a set of 
parameters, employing a hardware module, employing a trusted platform module 
( TPM). e mploying a smart card, employing a portable device, and employing a 
distributed protocol. 

41. (Canceled) 

42. (Canceled) 

43. (Currently Amended) The method as in Claim 38, further comprising: 

an external smart card device t hat is part of the first computing element, and 
wherein selected modules and parameters of the plurality of software logic 
modules and parameters reside on the external smart card device . j 

44. (Original) The method as in Claim 38, wherein selected ones of the parameters are at 
least one of: an encryption key, a decryption key, and an authentication parameter. 

45. (Currently Amended) The method as in Claim 38, further comprising: 

renewing selected modulon and paramotor s ones of the plurality of software logic j 
modules and parameters. 

46. (Currently Amended) The method as in Claim 38, further comprising: 

replacing selected modul e s and parame ter ao nes of the plurality of software logic j 
modules and parameters. 

47. (Currently Amended) The method as in Claim 45, wherein the renewing is performed in | 
at least one of: 

periodically, at random times, at predefined times, at predefined times derived 
from coordinated universal time (UTC), responsive to receiving data by the first 

-14- 



page 14/38 ' RCVD AT 11/7/2007 7:08:25 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-6/1 7 * ONIS:2738300 * CSID: 18476774656 * DURATION <mm-ss):08-24 



Nov 07 2007 19:08 S I TR I CK&S I TR I CK FAX 



1847G77465G 



p. 15 



PATENT APPLICATION 
Serial Number: 10/691,277 
Attorney Docket Number: TFI 1848 

computing element, responsive to sending the security tags veotora , and responsive to J 
sending data by the second computing element. 

48. (Currently Amended) The method as in Claim 38, further comprifling: wherein the data is 
stored in a memory in the first computing element responsive to the receiving the data in the first 
computing element: the method further comprising: 

erasing the data from the memory by-jn the first computing element bv the single 
logic program as part of in the first computing element. 

49. (Currently Amended) The method as in Claim 48, wherein the m emory is at least one of: 
a solid state device, ra ndom access memory, a main memory, a secondary memory, a magnetic 
storage device, and an optical storage device. 

50. (Currently Amended) The method as in Claim 48, wherein the e rasing the data is 
performed responsiv e to at least one of: 

after apredefined time, after the data was -has been output to an output device, and 
after the data was -has been o utput apredefined number of times to an output device. 

5 1 . (Currently Amended) The method as in Claim 37, wherein the first computing element is 
■m- comprised of at least one of: 

a computer, a wireless device, a handheld device, a Wi-Fi device, a device 
operating in accordance with IEEE 802.1 i, a device operating in accordance with IEEE 
802. 1 5, a device operating in accordance with IEEE 802,16. 2.5G cellular telephone, a | 
3G cellular telephone, a 4G cellular telephone, a 5G cellular telephone, a personal 
computer, a computing subsystem, a set- top box, a device operating in accordance with j 
UMTS (Universal Mobile Telephone System), and a device operating in accordance with 
IEEE 802.3 family of standards. 
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52. (Currently Amended) A method of providing content protection in communicating of j 
streaming data packets, the method comprising: 

defining within a first computing subsystem, defined rules for processing; 
receiving the streaming data packets containing content, in the first computing 
subsystem; 

processing of the streaming data packets in the first computing subsystem | 
according to defined rules for processing; 

generating security tags veeters-responsive to execution of t he defined rules for J 
processing; 

sending the security tags v e ctors fr om the first computing subsystem to a second 
computing subsystem; 

providing defined validation logic in the second computing subsystem relating to 
said generating of secur ity tags : 

processing, in the second computing subsystem, the received security tags 
vcotoro , responsive to the defined validation logic to provide respective validated security 
tags vectors; and 

processing in the second computing subsystem the validated security tags v e ctors 
and the received security tags vectors to determine whether the generating security tags in 
the first computing subsystem was properly generated responsive to execution of the 
defined rules for processing at compliant c o mm unication of the streaming data naok e t r. to 
the first computing subsystem from a third subsystem . 

53. (Currently Amended) The method as in claim 52, wherein the content is representative 
of at least one of: a movie, a book, a music piece, aconcert, a 3D movie, a sport even t, a text 
file, and a multimedia file; 

wherein the content is divided into predefined number of parts, and 

wherein each subset o f the p arts is associated with a decryption key. 1 
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54. (Currently Amended) A communication method for authentication of communications j 
o fgeneration of communicated data packets, the method comprising: 

transmitting data pa ckets from a second computing subsystem to a first computing 
subsystem; 

receiving the streaming data packets for processing in the first computing 
subsystem : 

defining rules of processing; 

wherein the processing provides playing that provides at least one of: an input to 
an audio device and an input to a video display; 

generating security tags veeters-responsive to the streaming data packets 
responsive to the rules of processin g and the data packets ; 

t ran s m itt in g data pack e ts .from a second subsystem to a first subsyst e m; 

rec e iving the transmitted streaming data packets for processing in the first 
subsyst em; 

sending respective ones of the security tags vectors from the first computing 
subsystem to the second computing subsystem, responsive to the streaming data packets 
and the rules of processing; and 

processing the received security tags vectors i n the second computing subsystem 
to assure -vatidatc t hat the processing in the first computing s ubsystem is compliant 
with operating according to the defined r ules of processing. 

55. (Currently Amended) The method as in Claim 54, further comprising: 

validating the received security tags v e ctors in the second computing subsystem 
responsive to arsecond rules of processing; and 

processing int e rlocking -the validating of t he received security tags vectore in the 
second computing subsystem to validate execution of a correct logic mod ule providing 
w i th fe e-defining of the rules of processing in the first computing subsystem, to validate 
that the processing of the streaming data packets in the first computing subsystem is 
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according to the respective defined rules for processing utilizing the respective correct 
lo gic modulc to os s uro evompli aiit commumoat to ii . 

56. (Currently Amended) A computer system ^er-providing remotely authenticated 
epe ration s remote atithentj cation of processing of content, the system comprising: 

a tag generator operating from an initial generator state to locally g enerate a 

sequence of security tags vector s responsive to concurrent execution upon a sequence of 

content processing steps; 

means providing for transmission of the sequence of security tags v o otoro ; | 
a tag verifier operating from an initial verification state to generate a sequence of 

comparison security tags v ecto r s for selective comparison to the sequence of the security 

tags^eetors; and 

means for coordinating the initial generator state and the initial verifier state prior 
to the execution on the s equence of content processing steps, | 

wherein the tag verifier selectively provides valid comparison tags responsive to 
the means for coordinatin g, wherein the valid comparison tags are utitized to provide 
authentication of the execution of the sequence of content processing steps. 

57. (Currently Amended) The system as in Claim 56, wherein the tag generator includes a 
sequence number as part of the security tags-veeter. | 

58. (Currently Amended) The sy stem as in Claim 57, wherein the tag verifier generates a 
comparison sequence number for selective comparison to the sequence number that is part of the 
security tags vector . j 

59. (Currently Amended) The system as in Claim 57, wherein the sequence number is used 
for at least detecting a loss of a respective security tag v e ctor loss . 
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60. (Currently Amended) The system as in Claim 56, wherein the tag generator provides a 
secure time-stamp as part of each of t he security tags-veete* • j 

61 . (Currently Amended) The system as in Claim 60, wherein the tag verifier generates a 
comparison secure time-stamp for selective comparison to the secure time-stamp that is part of 
each of the security tags-ve^eF. j 

62. (Currently Amended) The system as in Claim 56, further comprising: 

means for remotely downloading of codes and parameter s for use with the tag | 
generator and the sequence of content processing steps . 

63. (Currently Amended) The system as in Claim 62, wherein the codes and parameters are 
used to perform at least one of: processing str e aming dnta paclc e ts to provide the sequence of 
content processing steps , and generating security tags vectors. 

64. (Currently Amended) A system for providing secure integration of separate software j 
logic modules to provide a combined functionality, the system comprising: 

a first processing c omputing subsystem , wherein the first computing subsystem 
provides: 

(a) receiving for proce s sing of streaming data packets from a media server 
associated with the fust computing subsystem, and providing processing of the 
streaming data packets, responsive to defined rules for processing of the 
streaming data packets, and 

(b) for g e nemtio n generation of security taps and selectively sending of the 
security tags- v ee to ra to said media server associated with the first computing 
subsystem : 

the system further comprising: 

wherein tho-fifst-proo e sging s ubsyst e m is furth e r comprised of a plurality of 
software logic modules each operable stand-alone to provide a respective one of a 
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plurality of subtask functions associated with operations on the first comp uting 
sub system : and 

a transformation controller fay- providing interlocking of the plurality of software 
logic modules into a single logic program that provides a combined functionality : 

wherein the combined functionality is only provided by the first computin g 
subsystem w hen the plurality of subtask functions are executed concurrently responsive 
to the single logic program. 

65. (Currently Amended) The system as in Claim 64, wherein the single logic program is 
written to be immune to reverse generation. 

66. (Currently Amended) The system as in Claim 64, wherein one of the software logic 
modules provides a cryptographic function for producing a pseudo-random sequence of security 
tag s ai the first computing subsystem: 

wher ein the pseudo-random sequence of security taps are sent to the second 
computing subsystem for verification of correct processing on the first computing I 
subsystem; and 

wherein th e streaming data packets are sent to the first computing subsystem from 
said media server , only upon successful verification that the combined functionality was 
executed on. the first computing subsystem . 

67. (Currently Amended) The system as in Claim 66, wherein producing the pseudo-random | 
sequence of security tags utilizes computation by at least one of: 

applying a pseudo-random generator, applying a pseudo-random function, 
applying a cryptographic function, applying an encryption function, applying a 
scrambling subroutine, applying an authentication function, applying a digital signing 
function, applying a cryptographic hash function, applying a subroutine, applying a 
computational logic module, applying a symmetric cryptography function applying an 
asymmetric cryptography function, employing a cryptographic key, employing a 
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cryptographic seed, employing an encrypted software, employing an obfuscated software, 
employing a hidden program, employing logic with a set of parameters, employing a 
hardware module, employing a smart card, employing a portable device, and employing a 
distributed protocol. 

68. (Currently Amended) The system as in Claim 64, wherein one of the software logic 
modules provides logic to process the-content of received t he,streaming data packets. j 

69. (Currently Amended) The system as in Claim 68, wherein logic to process the content of 
received the streaming data packets performs at least one of: j 

video rendering of the content on a video display, playing the content via audio 
speakers, displaying the content on an e-book output device, outputting the content to an 
output device, and outputting the content to an analog output device. 

70. (Currently Amended) The system as in Claim 64, wherein one of the software logic 
modules provides rules of playing of audio and video content | 

71 . (Currently Amended) The system as in Claim 70, wherein the rules of playing of audio | 
and video content ensure at least one of: 

the content is not printed; the content is not sent to a third party; the content is 
destroyed after being displayed on a video monitor; the content is being destroyed after 
being played via an audio speakers; the content is erased from all memory storage 
devices after being displayed on a video monitor; the content is erased from all memory 
storage devices after being played via an audio speakers; the content is erased from all 
memory storage devices after being used via an e-book output device; the content is 
erased from all memory storage devices after a predefined time interval; the content is 
erased from all memory storage devices at a time defined time by coordinated universal 
time (UTC); the content is used in accordance with rights defined using XrML 
(Extensible Rights Markup Language) specifications; the content is used in accordance 
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with trusted computing specifications; the content is used in accordance with trusted 
computing based principles; and the content is used in accordance with at least one of the 
following: watermarking information, stenographic information, fingerprinting 
information, embedded data and digital signature information. 

72. (Currently Amended) The system as in Claim 70, wherein at l e ast on e of t he rules of 
playing prov i de at least one of : content processing and determine s determining a renewable 
software for content processing. 

73. (Currently Amended) The system as in Claim 72, wherein the renewable software for 
content processing is at least one of: 

anumber of times the content can be displayed, anumber of times the content can 
be played, a time signal, a UTC time signal, a digitally signed time signal, a software 
element, a predefined task, a code for processing content signature, and a code for 
watermarking the content 

74. (Currently Amended) The system as in Claim 72, wherein the renewable software for 
content processing is obtained from at least one of: 

a second computing subsystem, a second computing element, predefined logic, an 
external rule controller, a security management system, via a network interface, a 
network appliance, a server, a network management system, a firewall, ajoxal 
oomputatioB Compuring subsystem, a smart card device, a trusted platform module (TPM) 
device , and a portable device. 

75. (Currently Amended) The system as in Claim 64, wherein one of the software logic 
modules provides a cryptographic function for producing a pseudo-random sequence of security 
tags vectors ; and 

wherein one of the software logic modules provides logic to process and play 
audio and video content. 
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76. (Original) The system as in Claim 64, wherein one of the software logic modules 
provides a cryptographic function for verifying at least one of: watermarking, embedded data and 
fingerprinting. 

77. (Currently Amended) The system as in Claim 64, further comprising: 

a source of interlocking parameters, and 

wherein the transformation controller is further comprised of means for 
combining the software logic modules ac co r din g to defined interlock in g lo gic responsive 
to the interlocking parameters. 

78. (Original) The system as in Claim 77, wherein the source of interlocking parameters is 
generated by at least one of: 

a random source, a cryptographic key, and a defined table and location in 
memory. 

79. (Currently Amended) The system as in Claim 77, wherein the transformation controller 
determines an intermixture of the subtask functions of the plurality of software logic modules 

into the single logic p rogram to provide the combined functionality. j 

80. (Currently Amended) The system as in Claim 79, wherein the intermixture of the subtask 
functions of the plurality of software logic modules into the single logic program to provide the 
combined functionality c an be provided in a defined plurality of different ways; and 

wherein each of the defined plurality of d ifferent ways provides a different ewe 
version o f the single lo^ic p rogram providing the combined functionality, 

8 1 . (Currently Amended) The system as in Claim 80, wherein the intermixture of the subtask 
functions of the plurality of software Logic modules into the single logic program to provide the 
c om bined functionality i s further comprised of at least one of: 
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obfuscation, encryption, replication, adding dummy code, addition of redundant 
control, renaming of variables, splitting a procedure into multiple sub-procedure, 
dictionary transformation, compilation, interpretation, cryptographic transformation, 
digital signing, and scrambling. 

82. (Currently Amended) The system as in Claim 8 1 , wherein the replication is comprised of 
repetitions of the software logic modules into an oversize program comprising the single logic 
program therem-embedde d therein , 

83. (Currently Amended) The system as in Claim 82, wherein each of the r epetitions is made 
active separately to define an active single program within the oversize program which acts as 
the single logic p rogram. 

84. (Currently Amended) The system as in Claim 64, wherein the transformation controller 
further generates external software modules for linked operation with the single logic program as j 
required for the combined functionality. 

85. (Currently Amended) The system as in Claim 84, further comprising: 

means for transmitting the external software modules to aseparate computing j 
subsystems, and 

wherein the external software modules are executed in at least one of t he separate j 
computing subsystems to provide at least one of: update information and renewable 
information coupled to the single logic program, 

86. (Original) The system as in Claim 85, wherein the means for transmitting utilizes at least 
one of: encryption, authentication, and digital signing. 
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87. (Original) The system as in Claim 85, wherein the update information is at least one of: 
change data, change executable code, change pattern, change order and pseudo-change of 
dummy code. 

88. (Original) The system as in Claim 85, wherein the renewable information is at least one 
of: 

renewable content processing, time signal, a UTC time signal* a digitally signed 
time signal, a digital cache for transmission of trusted content processing, and a 
cryptographic key for marking trusted content processing. 

89. (Original) The system as in Claim 64, further comprising: 

means for transmitting the single logic program to a primary computing system. 

90. (Original) The system as in Claim 89, wherein the means for transmitting utilizes at least 
one of: encryption, authentication, watermarking, and digital signing. 

91. (Original) The system as in Claim 64, wherein security verification information is 
generated by the transformation controller, for utilization by separate security tag verification 
logic in a separate subsystem which validates the security tags. | 

92. (Original) The system as in Claim 64, wherein one of the software logic modules 
provides security services. 

93. (Original) The system as in Claim 92, wherein the security services provide for at least 
one of: 

user authentication, user sign-on, data packet authentication, user login, applying 
a user's cryptographic key, applying an organization's cryptographic key, group 
encryption, watermarking validation, and digital signing. 
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94. (Original) The system as in Claim 92, wherein the security services further provide for 
applying cryptographic transformations based on keys belonging to a primary computing system. 

95. (Original) The system as in claim 94, wherein the primary computing system provides 
for execution of the single logic program. 

96. (Currently Amended) A method of providing controlled signaling, the method 
comprising: 

providing defined rules s idelining a t least one of: transmission, forwarding, and 
operatio n on a first computing subsystem : 

processing r cceiving^streaming data packets from a media server, at the first \ 
computing subsvstem iji acc o rdance with ths defiaed retes ; 

processing of the streaming data packets on the first computing subsystem, in 
accordance w it h the defined rules in. the first computing subsystem: 

generating a security tag veetw-responsive to validating the processing in 
accordance with the defined rules in the first computing subsvstem :-an4 

con s tructing a signal reaponsiv e to computing with t ransmitting the security tag 
veeter onto a communications path from the first computing subsystem: I 

receiving the security tag fr om the communications path on a second computing 
subsystem: and 

validating the security tag on the second computing subsystem so as to validate 
that the- processing of the streaming data packets is in accordance with the defined rules, 
and that said proces sing of the streaming data packets took place at the first computing 
subsystem only upon successful validation . 

97. (Canceled) 

98. (Canceled) 
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99. (Currently Amended) The method as in Claim 96 4 further comprising: 

receiving at l ea s t s om e selec ted parts of the defined rules of at l east on e o f : 
t ra nsm i s s ion, forwarding, and op e ration, on the first computing subsystem from a 
separate rules controller. 

100. (Currently Amended) The method as in Claim 96 3 further comprising: 

determining a renewable software module for at least one of: transmission, 
forwarding, and operation responsive to at least one of the defined rules on the first 
computing subsystem of at least one of: transmission, forwarding, and operationontiie 
firs t computing subsystem . 

1 01 . (Currently Amended) The method as in Claim 96 5 wherein the generating the security 
lagcomprises at least one of: 

applying a pseudo-random generator, applying a pseudo-random function, 
applying a cryptographic function, applying an encryption function, applying a 
scrambling subroutine, applying an authentication function, applying a digital signing 
function, applying a cryptographic hash function, applying a subroutine, applying a 
computational logic module, applying a symmetric cryptography function, applying an 
asymmetric cryptography function, employing a cryptographic key, employing a 
cryptographic seed, employing an encrypted software, employing an obfuscated software, 
employing a hidden program, employing logic with a set of parameters, employing a 
hardware module, employing a smart card, employing a portable device, and employing a 
distributed protocol. 

102. (Currently Amended) The method as in Claim 9?96, wherein the communications path 
connooti i couples a network interface with at least one of: 

a computer , a wireless device, handheld device, a Wi-Fi device, a device 
operating in accordance with IEEE 802. 1 1 , a device operating in accordance with IEEE 
802.15, a device operating in accordance with IEEE 802.16. a 2.SG cellular telephone, a 
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3G cellular telephone, a 4G cellular telephone, a 5G cellular telephone, a personal 
computer, a set-top box, a device operating in accordance with UMTS (Universal Mobile 
Telephone System), and a device operating in accordance to IEEE 802.3 family of 
standards. 

103. (New) The system as in claim 96, wherein the validating confirms that the first 
computing subsystem is operating in compliance with at least one of digital right management 
rules and content management system rules. 

104. (New) The system as in claim 96, wherein the communication path is comprised of 
defined communications of at least one of: a VPN, an ATM, a FR, a CPN, a content delivery 
network (CDN) f an ISP, a shared media, a firewall, a local area network, an Internet, a 
metropolitan area network, a SAN, a link to application server, a link to web server, a link to data 
base server, a link to Internet server, a link to network server, a public network, an enterprise 
network, and a carrier network. 
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